Read the docs

Pretty Links

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Pretty Links records in CISA KEV

No Pretty Links vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pretty Links 1 record LOW

Records

3 records

TI-2019-15250 CVE-2019-25147 · GHSA-4r26-5226-443f

Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link

Priority LOW 39

The Pretty Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via various IP headers as well as the referer header in versions up to, and including, 2.1.9 due to insufficient input sanitization and o…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00749 Published 2023-06-07 Fixed in 2.1.10 CWE-79
TI-2024-19546 CVE-2024-29770 · GHSA-3j2m-c7pf-qmrp

WordPress Pretty Links plugin <= 3.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pretty Links Shortlinks by Pretty Links allows Reflected XSS.This issue affects Shortlinks by Pretty Links: from n/a t…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00418 Published 2024-03-27 No fix listed CWE-79
Open these records in search →